Analyses / Public Summary / 119 · HR 7266 Public Summary

119-HR-7266 Journalist Public Summary

119 · HR 7266 Rural and Municipal Utility Cybersecurity Act

Reauthorizes and updates a federal program to fund and assist small, rural, and municipal electric utilities in defending against cyberattacks, with $250 million through FY2026–FY2030, priority for resource‑limited and critical-grid operators, and protections for sensitive information shared with government.

Published
29 Jan 2026
Updated
29 Jan 2026
Tags
public-summary · cybersecurity · energy
Unvetted
01 · Section

Headline Summary

A bipartisan House bill would extend and update a federal program that helps rural, municipal, and other small electric utilities strengthen their cybersecurity, authorizing $250 million through 2030.

02 · Section

What It Does

The Rural and Municipal Utility Cybersecurity Act reauthorizes and revises an existing Infrastructure Investment and Jobs Act program to give grants, prizes, and technical assistance to eligible electric utilities so they can prevent, detect, respond to, and recover from cyber threats. It prioritizes entities with limited cybersecurity resources and those operating assets critical to the bulk power system or defense facilities. It also shields sensitive cybersecurity information shared with governments from public disclosure under federal and state open‑records laws.

Authorized funding
250million USD (FY2026–FY2030)
Eligible small IOU threshold
4000000MWh/year (less than)
Program focus
4functions (protect, detect, respond, recover)
Short title
Rural and Municipal Utility Cybersecurity Act
Program name
Rural and Municipal Utility Advanced Cybersecurity Grant and Technical Assistance Program
Who can apply
Rural electric co-ops; municipally owned utilities; multi‑subdivision public power entities; qualifying non‑profits partnering with 6+ such utilities; small investor‑owned utilities (<4,000,000 MWh/year).
Priority applicants
Utilities with limited cyber resources; owners of bulk‑power critical assets; owners/operators of defense critical electric infrastructure.
Information protection
Cyber information shared with government deemed voluntary and exempt from FOIA/state equivalents.
03 · Section

Who’s For It

  • Bill sponsors: Rep. Mariannette Miller‑Meeks (R‑IA) and Rep. Jennifer McClellan (D‑VA).
  • Likely supporters include rural electric cooperatives and municipal/public power utilities that stand to receive funding and technical help.
  • Small investor‑owned utilities (those under the 4,000,000 MWh/year threshold) that qualify for assistance.
  • Cybersecurity advocates who favor targeted investments to harden critical infrastructure serving small communities.
04 · Section

Who’s Against It

  • Fiscal conservatives who oppose new or expanded federal grant spending.
  • Open‑government and transparency advocates concerned about broad exemptions from public records laws for information shared under the program.
  • Stakeholders who may argue the bill favors smaller entities while excluding larger investor‑owned utilities, raising fairness or coverage questions.
  • General skeptics of federal involvement who prefer state, local, or utility‑funded approaches to grid cybersecurity.
05 · Section

What’s Next

Status: Introduced in the House on January 27, 2026, and referred to the Committee on Energy and Commerce. Next typical steps are committee hearings and markup; if approved, the bill would move to a House floor vote, then to the Senate, and finally to the President if both chambers pass it.

Discussion